Skip to content
OpenAdvisories

Product · nuxt

nitro-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119200 Public exploit

    Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes

    Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, Nuxt resolves literal or percent-encoded dot segments before rendering a page while Nitro routing, server/middleware checks, and server route rules evaluate the unresolved pa…

    nuxt nuxt nitro-server nuxt npm